CVE-2022-20900 — Classic Buffer Overflow in Cisco Small Business RV Series Router Firmware

CWE-120 — Classic Buffer OverflowCWE-77 — Command Injection4 documents4 sources
Severity
7.2HIGHNVD
CNA4.7
EPSS
0.4%
top 40.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Cisco Small Business RV Series Router FirmwareCisco Rv110w FirmwareCisco Rv130 Firmware+2 more
Timeline
PublishedJul 22
Latest updateJul 23

Description

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition. These vulnerabilities are due to insufficient validation of user fields within incoming HTTP packets. An attacker could exploit these vulnerabilities by sending a crafted request to …

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages5 packages

🔴Vulnerability Details

2
GHSA
GHSA-mgmx-3854-pw2c: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authen↗2022-07-23
▶
CVEList
Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities↗2022-07-21
▶

📋Vendor Advisories

1
Cisco
Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities↗2022-07-20
▶
CVE-2022-20900 — Classic Buffer Overflow in Cisco | cvebase